From 04232d908f5b339d85d1493d3ca9810ea88517c2 Mon Sep 17 00:00:00 2001 From: jwinterm Date: Fri, 9 Oct 2026 12:38:44 -0400 Subject: [PATCH] docs(privacy): disclose the v0.3.1 swap providers and the old Smirk server Section G now names every third party the v0.3.1 wallet can contact, matching the client's PRIVACY.md: Trocador, THORChain through Liquify's gateway, NonLogs through our backend, Neroswap price lookups, and backend.smirk.cash for old tips. It says what each receives and when, that opening the Swap tab contacts no provider, and that NonLogs is the one provider that does not see the user's IP. It also adds the NonLogs fee share beside the Trocador commission, and the second sealing of tip claim keys sent to a Nostr identity. Effective date moves to October 9, 2026. --- src/app/privacy/page.tsx | 41 +++++++++++++++++++++++----------------- 1 file changed, 24 insertions(+), 17 deletions(-) diff --git a/src/app/privacy/page.tsx b/src/app/privacy/page.tsx index 6587e6b..2eb3d3e 100644 --- a/src/app/privacy/page.tsx +++ b/src/app/privacy/page.tsx @@ -23,7 +23,7 @@ export default function Privacy() { {/* Content */}

- Effective July 2, 2026. + Effective October 9, 2026.

@@ -139,18 +139,22 @@ export default function Privacy() {

  • What we do not share: seed phrases, private spend keys, balances of un-authorized assets, history of other origins.
    • -

    G. Optional Crypto Swaps

    +

    G. Optional Crypto Swaps and Other Third Parties

    - Smirk offers in-wallet crypto swaps (e.g. BTC ↔ XMR) via third-party - aggregators such as Trocador. We do not operate an - exchange ourselves. When you choose to swap, the wallet queries the - third-party aggregator for quotes and routes the trade through them. + Smirk offers in-wallet crypto swaps through independent providers. We do not + operate an exchange ourselves and we are never in custody of, or in the settlement + path for, the swapped funds. Opening the Swap tab contacts no swap provider. Each + provider is contacted only after you choose it, and directly from your device + unless stated otherwise, so it sees your IP address.

    H. Nostr Identity & name@smirk.cash

    @@ -181,6 +185,7 @@ export default function Privacy() {
  • Retention: a relay we operate stores encrypted messages briefly (currently about 30 days) so your other devices can fetch them, then deletes them.
  • Your choice of relay: you can use other Nostr relays instead of, or in addition to, ours — messaging does not depend on us.
  • Opt-in: messaging is a feature you choose to use.
    • +
  • Tips to a Nostr identity: these travel as gift-wrapped messages on Nostr relays. The key that claims the tip is sealed a second time between sender and recipient, so neither a relay nor a website you have granted Nostr access can read it, and the wallet refuses to decrypt its own tip messages for websites.

    • J. IP Addresses

    @@ -238,7 +243,7 @@ export default function Privacy() {
  • Encrypted: All tip payloads are encrypted on your device.
  • Identity: We only store your Social ID to help people find your public key.
  • Dapps: The window.smirk API is opt-in per origin, revocable per origin, and can be turned off globally in Settings.
    • -
  • Swaps: Optional, opt-in, routed through third-party aggregators (e.g. Trocador). We never operate an exchange, but we do earn a ~1% referral commission that's baked into the quoted rate.
    • +
  • Swaps: Optional and opt-in through Trocador, THORChain (via Liquify) or NonLogs. Opening the Swap tab contacts no provider. We never operate an exchange, but we earn a commission from Trocador and NonLogs that is already in the quoted rate.
  • Identity: An optional Smirk username + your linked Nostr key (npub) are public — they back your name@smirk.cash handle. No username, no listing.
  • Messaging: Optional end-to-end encrypted DMs over Nostr. Relays (ours or public) carry only ciphertext they can't read; a relay we run keeps encrypted messages ~30 days.
  • Self-hostable: The v0.3 backend is open source — run your own and none of this backend data touches us.
    • @@ -250,11 +255,12 @@ export default function Privacy() {

    4. Third parties you choose to enable

    Some features connect you to independent third parties operated by others, - not by us — Trocador for swaps, the Electrum/Fulcrum servers noted above, - the public Nostr relays that carry optional messaging, the block explorers + not by us: Trocador, THORChain through Liquify's gateway, NonLogs (through + our backend), and Neroswap price lookups for swaps, the Electrum/Fulcrum servers + noted above, the public Nostr relays that carry optional messaging, the block explorers opened by "view on explorer" links, and any site you connect to - through the window.smirk interface. Because your device contacts - these endpoints directly, each can see your IP address alongside whatever the + through the window.smirk interface. Where your device contacts + these endpoints directly (everything except NonLogs), each can see your IP address alongside whatever the interaction entails — for a swap, the asset pair, amounts, and your destination and refund addresses; for an explorer, the transaction or address you open. Each has its own privacy policy. We neither control nor monitor @@ -291,8 +297,9 @@ export default function Privacy() { . We do not sell your data.

    - For data held by third parties you've used through Smirk (Trocador, node - operators, Electrum servers), contact those providers directly using the + For data held by third parties you've used through Smirk (Trocador, THORChain + and Liquify, NonLogs, Neroswap, node operators, Electrum servers), contact those + providers directly using the privacy contact in their respective policies.